182 matches found
CVE-2023-48698 Azure RTOS USBX Remote Code Execution Vulnerability
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in host...
gallipatosdeparapanda.com Improper Access Control vulnerability OBB-3799825
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
er-verlag.de Cross Site Scripting vulnerability OBB-3223550
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE CVE-2014-9584
The parserockridgeinodeinternal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference ER System Use Field, which allows local users to obtain sensitive information from kernel memory via a crafted iso9660 image...
CVE-2021-41594
In RSA Archer 6.9.SP1 P3, if some application functions are precluded by the Administrator, this can be bypassed by intercepting the API request at the /api/V2/internal/TaskPermissions/CheckTaskAccess endpoint. If the parameters of this request are replaced with empty fields, the attacker achieve...
Google Tensorflow 安全漏洞
Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow, which stems from the er optimizer in TensorFlow that can cause a denial of service by modifying the SavedModel so that issimplifiableshape will...
er-journal.com Cross Site Scripting vulnerability OBB-2120742
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Command Execution Vulnerability in H3C ER G2 Series Routers
H3C ER G2 series is a new generation of enterprise-grade Gigabit high-performance routers launched by Hangzhou Huasan Communication Technology Co. It is targeted at the SMB market of Ethernet/fiber/xDSL access, which mainly includes network environments of government agencies, small and...
Binary Vulnerability in H3C ER G2 Series Routers
H3C ER G2 series is a new generation of enterprise-class Gigabit high-performance routers launched by Hangzhou Huasan Communication Technology Co. A binary vulnerability exists in the H3C ER G2 series routers, which can be exploited by attackers to cause a denial of service...
CVE-2020-22275
The CVE describes a CSV injection in WordPress Easy Registration Forms (ER Forms) plugin v2.0.6, where attacker-supplied entries with malicious CSV commands are not sanitized, enabling code execution when an admin exports CSV data. Affected component: ER Forms plugin for WordPress; root cause: in...
CVE-2020-22275: Improper Neutralization of Formula Elements in a CSV File
Easy Registration Forms ER Forms Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable...
er-teknikservis.com Cross Site Scripting vulnerability OBB-1445424
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
IQrouter 3.3.1 Firmware - Remote Code Execution
Exploit Title: IQrouter 3.3.1 Firmware - Remote Code Execution Date: 2020-04-21 Exploit Author: drakylar Vendor Homepage: https://evenroute.com/ Software Link: https://evenroute.com/iqrouter Version: IQrouter firmware up to 3.3.1 Tested on: IQrouter firmware 3.3.1 CVE : N/A !/usr/bin/env python3...
Changsha Tian Er Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities
Changsha Tian Er Network Technology Co., Ltd. is a technology-based development company. Changsha Tian Er Network Technology Co., Ltd. has a SQL injection vulnerability in its website builder system, which can be exploited by attackers to obtain sensitive information from the database...
er-go.it Cross Site Scripting vulnerability OBB-1115510
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2013-0725
ERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution vulnerabilities...
Design/Logic Flaw
ERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution vulnerabilities...
CVE-2013-0725
ERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution vulnerabilities...
CVE-2013-0725
CVE-2013-0725 affects ERDAS ER Viewer 13.0. The vulnerability involves the libraries dwmapi.dll and irml.dll , enabling arbitrary code execution. The CVE is referenced across NVD/Red Hat entries with the same description. Documented impact indicates potential code execution with local access; CVS...